struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Craig McClanahan <craig...@gmail.com>
Subject Re: Disable struts server side validation
Date Thu, 17 Mar 2005 17:57:33 GMT
On Thu, 17 Mar 2005 17:46:12 +0000, Bing Qiao <qiaobing@gmail.com> wrote:
> Hi,
> 
> I've got a questions about struts validator.
> 
> When defining custom validation rules, is it possible to only define
> the client side javascript without building classes?
> 
> Many thanks

You would need to modify the Struts controller in order to bypass
server side validation.  This is technically feasible, but there is no
automated setting for it because (in general) it is a *very* bad idea.
 Web applications that folow best practices do not blindly trust that
clients will obey the rules, including performing client side
validation for you.  Indeed, you can't assume that your clients even
have JavaScript (or have it enabled).

> 
> Bqiao
> 

Craig

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Mime
View raw message